Google's scam shield is getting better, but you have to switch it on

Who actually benefits from the best anti-scam feature in your messaging app: the person who reads settings menus for fun, or the person who gets the fake parcel text? Google's latest round of protections suggests the first group, and that is the problem.

Here is what happened. Google announced a new set of Android scam defenses, and Enhanced Protection in Google Messages is now rolling out gradually, according to Digital Trends. It uses cloud-based Gemini models to read the context of conversations with people not in your contacts, and it adds link checks and redesigned warnings. On the browser side, Android Central reports that Google says it has rolled out alerts for suspicious sites and bright red, full-screen warnings for sites known to be dangerous.

The idea is right: scams are conversations, not single messages

Most defenses were built for the obvious stuff: a dodgy link, a known spam number. Modern scams are patient. Someone posing as a delivery agent or a bank rep starts with something harmless and only later asks for money or a code. Judging the whole conversation, as Enhanced Protection does, is the correct response. In our view, this is a real step forward, not marketing gloss.

We also like the least glamorous part: the redesigned warnings for links from unknown numbers. Scams work because people rush, and a built-in pause can matter as much as any model. The same logic explains why a red full-screen Chrome warning is a smarter design than a small banner you learn to ignore.

Opt-in protection protects the people who need it least

Now the catch. Standard Protection stays the default, and, as Digital Trends notes, you have to choose Enhanced Protection yourself, under Protection & safety. The old on/off switch has become three tiers, with "No protection" labeled not recommended.

Absolute Geeks makes the point sharply: scam texts disproportionately hurt less tech-savvy users, who are also the least likely to dig through settings. We agree. A safety net that must be found, understood and enabled by the target is a net with a hole exactly where the fall is most likely.

It looks like Google is being cautious for a reason. Analysis happens in the cloud, and the company says its Private AI Compute encrypts data and processes it in an environment even Google cannot access. That is a claim, and an opt-in is a polite way of letting users decide whether to trust it. Fair enough. But then the honest framing is that privacy anxiety is being traded against protection, and the people least equipped to weigh that trade are making it by default, or by not making it at all.

Fragmentation and one vendor's menus

The second weakness is coverage. The smarter link checking launches on the Pixel 10 series and newer, Samsung's Galaxy S26 lineup, the Galaxy Z Flip 8 and Z Fold 8, plus some other devices. The conversation-based detection is expected to reach wider, with Gizbot mentioning Pixel 6 and later and Galaxy S24 and later. Owners of older or cheaper phones, who we suspect are often the same people most exposed, get less, and probably later.

And all of it lives inside Google's apps and Google's toggles. Messages, Chrome, Gemini: one vendor, one set of settings, one definition of "recommended." Anyone using a different messaging app or browser, or a phone outside the supported list, depends on whatever that product decides to do. We think that is a fragile model for something that works best when it is invisible and universal.

Credit where due: Google says it is working with device makers to bring its on-device scam alerts in chat notifications to hundreds of millions more users later this year. If that happens, the gap narrows.

What to do, and what Google should do

If you have an Android phone that supports it, switch to Enhanced Protection as soon as it appears, and set it up on the phones of parents and relatives too. That quick favor is probably worth more than any lecture. The old advice Gizbot repeats still holds: never share an OTP or click a link from a number you don't know.

For Google, our verdict is simple. The technology is good, and the red warnings are overdue. Now prove you believe in your own privacy promises: make Enhanced Protection the default, with a clear way out. Until then, this is a strong tool for people who were already careful.